build-security.yml 1.9 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364
  1. name: Build security nightly container image
  2. on:
  3. workflow_dispatch:
  4. permissions:
  5. contents: read
  6. packages: write
  7. jobs:
  8. compute-suffix:
  9. runs-on: ubuntu-latest
  10. if: github.repository == 'mastodon/mastodon'
  11. steps:
  12. - id: version_vars
  13. env:
  14. TZ: Etc/UTC
  15. run: |
  16. echo mastodon_version_prerelease=nightly.$(date --date='next day' +'%Y-%m-%d')-security>> $GITHUB_OUTPUT
  17. outputs:
  18. prerelease: ${{ steps.version_vars.outputs.mastodon_version_prerelease }}
  19. build-image:
  20. needs: compute-suffix
  21. uses: ./.github/workflows/build-container-image.yml
  22. with:
  23. file_to_build: Dockerfile
  24. platforms: linux/amd64,linux/arm64
  25. use_native_arm64_builder: true
  26. cache: false
  27. push_to_images: |
  28. tootsuite/mastodon
  29. ghcr.io/mastodon/mastodon
  30. version_prerelease: ${{ needs.compute-suffix.outputs.prerelease }}
  31. labels: |
  32. org.opencontainers.image.description=Nightly build image used for testing purposes
  33. flavor: |
  34. latest=auto
  35. tags: |
  36. type=raw,value=edge
  37. type=raw,value=nightly
  38. type=raw,value=${{ needs.compute-suffix.outputs.prerelease }}
  39. secrets: inherit
  40. build-image-streaming:
  41. needs: compute-suffix
  42. uses: ./.github/workflows/build-container-image.yml
  43. with:
  44. file_to_build: streaming/Dockerfile
  45. platforms: linux/amd64,linux/arm64
  46. use_native_arm64_builder: true
  47. cache: false
  48. push_to_images: |
  49. tootsuite/mastodon-streaming
  50. ghcr.io/mastodon/mastodon-streaming
  51. version_prerelease: ${{ needs.compute-suffix.outputs.prerelease }}
  52. labels: |
  53. org.opencontainers.image.description=Nightly build image used for testing purposes
  54. flavor: |
  55. latest=auto
  56. tags: |
  57. type=raw,value=edge
  58. type=raw,value=nightly
  59. type=raw,value=${{ needs.compute-suffix.outputs.prerelease }}
  60. secrets: inherit